# Prevent direct access to PHP files
<Files "*.php">
Order Deny,Allow
Deny from all
</Files>

# Allow image files
<FilesMatch "\.(jpg|jpeg|png|gif|webp)$">
Order Allow,Deny
Allow from all
</FilesMatch>